Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/5qytdZ8rsJNwnFDbx4ZA1MXt5NU.roa
File: 5qytdZ8rsJNwnFDbx4ZA1MXt5NU.roa (raw, json)
Hash identifier: 9xDEnfd/DyR6p4RxQvjLUd7q3sQ9jD4kwNRdV8NoYeo=
Subject key identifier: E6:AC:AD:75:9F:2B:B0:93:70:9C:50:DB:C7:86:40:D4:C5:ED:E4:D5
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0193646179D12CA3CBB927FBBAEBBCAC9883
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/5qytdZ8rsJNwnFDbx4ZA1MXt5NU.roa
Signing time: Mon 25 Nov 2024 17:32:10 +0000
ROA not before: Mon 25 Nov 2024 17:32:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57014
IP address blocks: 77.111.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:61:79:d1:2c:a3:cb:b9:27:fb:ba:eb:bc:ac:98:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Nov 25 17:32:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6acad759f2bb093709c50dbc78640d4c5ede4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e7:fc:56:c9:4e:b4:a8:cc:7d:5c:cc:eb:aa:
c0:c8:b3:3e:b6:4d:a3:a7:2d:4d:74:e2:1c:98:d3:
09:24:2e:72:21:c4:c7:6f:0d:a3:5c:92:46:fb:61:
0f:fc:47:b3:e9:cf:6d:b7:fa:8d:5a:b0:0c:6e:11:
62:1f:11:ce:1e:2d:b4:57:61:72:57:4d:7a:69:df:
82:f8:ba:73:a8:42:50:e1:73:a4:30:95:7c:43:c2:
12:fe:51:57:a5:6e:96:32:ab:45:62:d7:6a:6a:7c:
05:8e:9a:23:80:1e:38:57:f7:53:c6:4f:2a:b8:19:
f0:39:c2:05:ce:b5:ac:4e:0d:ca:5f:3d:9a:00:a4:
0f:fc:37:cc:02:14:5d:5f:42:6e:be:d8:ae:3c:74:
7b:61:8e:3c:a6:cb:7b:01:d3:d4:b0:08:2b:2b:59:
38:46:b2:7d:44:89:7d:8a:f5:d9:fb:ef:99:e3:a5:
70:e5:1b:9e:90:d7:a8:ca:fb:19:02:c5:9c:f1:8d:
ff:af:9c:56:05:53:7d:f2:d5:d5:77:fa:61:89:d4:
e7:e2:6a:2d:50:ee:1f:91:1d:1c:77:0f:b4:34:c5:
05:81:e5:31:26:63:cd:95:3a:28:7a:c3:b1:00:d4:
e8:41:34:79:be:5f:8b:84:9a:a3:dc:a7:34:6a:86:
52:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AC:AD:75:9F:2B:B0:93:70:9C:50:DB:C7:86:40:D4:C5:ED:E4:D5
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/5qytdZ8rsJNwnFDbx4ZA1MXt5NU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.99.0/24
Signature Algorithm: sha256WithRSAEncryption
72:5e:5a:eb:c5:69:c9:44:ce:a7:31:93:59:e5:7f:e6:37:1c:
e6:2b:f5:ed:3a:87:90:12:9e:a8:05:c1:a0:83:6d:5a:1d:39:
2d:d0:0a:5e:4a:ce:f6:dd:a5:5c:6b:6f:25:b4:3d:9f:e1:17:
61:3d:bc:71:9e:a3:5a:72:83:6c:15:14:8b:9a:7f:78:3a:1a:
03:f2:a5:96:e0:e3:fd:b6:70:60:6e:8a:e6:c2:e1:a2:83:17:
2f:f8:58:55:51:88:36:d4:56:be:73:3c:1a:fc:fc:d6:2a:ec:
b4:cc:9d:a7:6e:89:c1:76:dd:26:0b:2c:92:26:d5:a3:e9:b8:
54:04:ff:16:5e:e4:42:52:c2:1c:cb:9a:38:cb:e6:00:ff:f5:
97:10:7c:69:81:0f:61:74:7c:b1:78:87:a7:6b:c0:d0:7f:cb:
e9:58:5e:f8:89:b2:c7:f4:9a:cd:96:ff:5b:2a:32:18:95:55:
eb:84:a8:68:2e:db:d7:a7:f6:1d:69:a2:e3:98:51:b2:8a:a8:
d2:74:17:3f:7f:c1:f4:37:94:b6:3c:30:98:15:10:c1:f2:50:
71:48:4c:27:5e:e7:c0:28:ae:ea:6d:b3:0d:91:21:ab:96:48:
d0:e2:d9:78:ac:52:da:87:5e:92:af:bf:7e:f7:5d:c2:d3:7d:
14:38:ea:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNkYXnRLKPLuSf7uuu8rJiDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjQxMTI1MTczMjEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmFjYWQ3NTlmMmJiMDkzNzA5YzUwZGJjNzg2NDBkNGM1ZWRlNGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuf8VslOtKjMfVzM66rAyLM+tk2j
py1NdOIcmNMJJC5yIcTHbw2jXJJG+2EP/Eez6c9tt/qNWrAMbhFiHxHOHi20V2Fy
V016ad+C+LpzqEJQ4XOkMJV8Q8IS/lFXpW6WMqtFYtdqanwFjpojgB44V/dTxk8q
uBnwOcIFzrWsTg3KXz2aAKQP/DfMAhRdX0JuvtiuPHR7YY48pst7AdPUsAgrK1k4
RrJ9RIl9ivXZ+++Z46Vw5RuekNeoyvsZAsWc8Y3/r5xWBVN98tXVd/phidTn4mot
UO4fkR0cdw+0NMUFgeUxJmPNlTooesOxANToQTR5vl+LhJqj3Kc0aoZS7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOasrXWfK7CTcJxQ28eGQNTF7eTVMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvNXF5dGRaOHJzSk53bkZEYng0WkExTVh0NU5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATW9jMA0G
CSqGSIb3DQEBCwUAA4IBAQByXlrrxWnJRM6nMZNZ5X/mNxzmK/XtOoeQEp6oBcGg
g21aHTkt0ApeSs723aVca28ltD2f4RdhPbxxnqNacoNsFRSLmn94OhoD8qWW4OP9
tnBgbormwuGigxcv+FhVUYg21Fa+czwa/PzWKuy0zJ2nbonBdt0mCyySJtWj6bhU
BP8WXuRCUsIcy5o4y+YA//WXEHxpgQ9hdHyxeIena8DQf8vpWF74ibLH9JrNlv9b
KjIYlVXrhKhoLtvXp/YdaaLjmFGyiqjSdBc/f8H0N5S2PDCYFRDB8lBxSEwnXufA
KK7qbbMNkSGrlkjQ4tl4rFLah16Sr79+913C030UOOqQ
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:29 2025 by rpki-client